NDIS compliance

A 12-Month NDIS Registration Readiness Plan

21 October 2026 · 5 min read · Gaurav Nirwani

Why a 12-month horizon, not a 12-week one

From 1 July 2027, mandatory NDIS registration begins expanding beyond Supported Independent Living and platform providers to personal care, daily living supports, and supports delivered in closed settings, with every provider in scope expected to be registered by the end of 2030 — see our breakdown of what's confirmed about the 2027 wave for the detail behind that timeline. If any of your supports are likely to fall inside that expansion, the practical question isn't just "will I need to register" — it's "what does a provider who isn't registered today actually need to do between now and then." Evidence that shows a genuine track record takes months to accumulate; it can't be assembled in the fortnight before an application. A 12-month plan isn't a Commission requirement — it's a realistic planning horizon for building evidence you don't already have.

Months 1–2: confirm scope and run an honest self-assessment

Before building anything, work out which registration groups actually apply to what you deliver, using the Commission's own guidance on the mandatory registration reform hub and the categories named in its Regulatory Reform Roadmap. Then run a genuinely honest self-assessment against the relevant NDIS Practice Standards — not the version of your operation you'd like to present, but what's actually documented and actually practised today. This first pass is where most providers discover the real gap: policies that exist but haven't been followed consistently, or practices that happen but were never written down.

Months 2–4: close the paper gaps

With the gaps identified, this phase is about building what's missing: policies that describe what you actually do, an incident register that's genuinely maintained rather than created the week before an audit, worker screening checks current for every worker in a risk-assessed role, and service agreements that meet the standard. This is the least glamorous phase and the one most often rushed — but an auditor testing practice against policy during a certification audit will find a policy written the month before the audit far less convincing than one with months of use behind it.

Months 4–9: let the evidence accumulate in real operation

This is the phase a compressed timeline can't substitute for. A complaints register with no complaints in it because the service just started looks different to one with months of genuine entries and resolutions. A continuous improvement cycle needs at least one or two real turns — an issue identified, acted on, and reviewed — to be evidence rather than a template. If you run any regulated restrictive practices, authorisation and monthly reporting need a real operating history before an audit will find it convincing. The providers who struggle most at Stage 2 are usually the ones who built the paperwork correctly but didn't give it time to become practice.

Months 6–9: choose your own approved quality auditor

Certification audits for higher-risk supports run through an approved quality auditor you select from the Commission's published list. We don't refer or recommend specific auditors — that's a decision for you to make on your own judgement, timeline, and the audit types they're approved for. Worth doing earlier rather than later: as more providers move through the 2027 expansion at the same time, early engagement gives you more say over scheduling than leaving it until the months immediately before your target date.

Months 9–12: lodge, get scoped, and prepare for the audit itself

Your application includes a self-assessment against the applicable Practice Standards with supporting evidence, and key personnel and suitability details — and the Commission notes an application left incomplete for 60 days is automatically deleted, so this isn't a stage to start casually and finish later. Once submitted, the Commission issues a Scope of Audit letter confirming the registration pathway and modules you'll be assessed against. From there, the certification audit itself runs in stages — a desk review of your documented evidence, then an on-site assessment of whether what's written down matches what actually happens. Twelve months of groundwork is what makes that second part straightforward instead of stressful.

What this timeline doesn't promise

Twelve months is a planning horizon we think is realistic, not a figure the Commission publishes or guarantees. The Commission doesn't commit to a fixed turnaround for assessing an application or completing a certification audit, and auditor availability varies with how many providers are moving through the system at the same time — which is exactly why this plan treats the early months as buffer rather than slack. If your evidence is genuinely ready sooner, nothing here stops you from applying earlier. If building a real track record honestly takes longer than twelve months for your service, that's a reason to start now, not a reason the plan has failed.

The parts providers most often skip

Two steps get dropped under time pressure more than any others. The first is the honest self-assessment in month one or two — it's tempting to skip straight to building policies for the gaps you already suspect, which means you never find the gaps you didn't know about. The second is letting evidence actually operate before lodging — assembling a complete-looking set of documents in month three and treating the readiness work as "done," rather than giving the register, the policy, and the practice months to align with each other. Both shortcuts save time up front and cost more at Stage 2, when an auditor is testing whether what's written down matches what genuinely happens.

How Compliance Care helps

We help providers run exactly this kind of readiness program — our gap analysis and pre-audit reviews give you an honest read against the Practice Standards that actually apply to you, then help building the evidence that's missing, and the discipline of giving it time to become genuine practice rather than a folder assembled in a hurry. If you're not yet sure whether your supports fall inside the 2027 expansion at all, our guide for unregistered providers is a useful starting point, and our wider look at what unregistered providers can do now covers the supports that already require registration today.

Want an honest read on where your evidence currently stands against a 12-month plan? Book a discovery call and we'll help you work out what genuinely needs the next year, and what doesn't.

Get NDIS compliance updates

Practical guidance on registration, audits and the 2027 wave. No spam, unsubscribe in one click.

Need a hand putting this into practice?

Book a no-obligation discovery call — you’ll leave knowing exactly where you stand.

Book a discovery call

Peace of mind, by design.

Book a Free Compliance CheckCall